UH settles data breach lawsuit

HONOLULU (January 26, 2012) - The University of Hawai‘i has settled the class action data breach lawsuit involving five alleged data breaches between 2009 through 2011. The settlement will provide class members with two (2) years of credit monitoring and credit restoration services. The settlement in Gross v. University of Hawai‘i will impact approximately 96,000 UH students, faculty, alumni, UH employees and others who were part of the five alleged data breaches. The alleged breaches occurred at UH Mānoa, UH West O‘ahu, Kapi‘olani Community College, and Honolulu Community College.

The University, which has denied liability in the settlement, stated: "We are pleased to settle this case by providing two years of credit monitoring and credit restoration services to those class members who request it. The University continues to work diligently so that the chance of future data breaches is significantly reduced. Given the uncertainties and expense of litigation, the University believes this settlement is in the best interests of the University and its entire ‘ohana."

Class counsel Thomas Grande and Bruce Sherman stated “the willingness of the University to offer two years of credit counseling and credit restoration services is significant and sets a very positive example in Hawai‘i for responding to future data breaches involving private or public entities. In addition the University is reviewing and improving its data storage policies and procedures, which will hopefully prevent or at least greatly minimize future data breaches.”